PT-2019-13976 · Prise · Prise Adas

Published 2019-09-20 · Updated 2020-08-24 · CVE-2019-15085

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions PRiSE adAS version 1.7.0

Description An issue was discovered where the current database password is embedded in the change password form, potentially exposing it.

Recommendations For PRiSE adAS version 1.7.0, consider removing the embedded database password from the change password form to prevent potential exposure. As a temporary workaround, restrict access to the change password form until a more secure solution is implemented.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2019-15085

Affected Products

Prise Adas

References · 4

• https://osv.dev/vulnerability/CVE-2019-15085 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-15085 · Security Note
• http://adas-sso.com/es/extra/download.php · Note
• https://security-garage.com/index.php/cves/from-open-redirect-to-rce-in-adas · Note